Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-93046
In the Linux kernel, the following vulnerability has been resolved:
software node: Fix software_node_get_reference_args() with index -1
The bounds check for the index p...
|
7.0 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-93045
In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject arena frees below the arena base
bpf_arena_free_pages() accepts scalar arena addresses....
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-93042
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: dw-edma: Terminate all descriptors without callbacks
The DMA Engine client documentation...
|
8.8 High | — | 0,40% | 17 Sep 2026 |
|
CVE-2026-93039
In the Linux kernel, the following vulnerability has been resolved:
ASoC: meson: Keep link pointers valid on realloc failure
meson_card_reallocate_links() grows the DAI...
|
7.4 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-93037
In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1: Propagate sdma_txinit_ahg() errors
set_txreq_header_ahg() ignores the return value of sdm...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92980
HortusFox-Web prior to version 6.1 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary OS commands as the web ser...
|
7.2 High | — | 0,98% | 17 Sep 2026 |
|
CVE-2026-92525
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
For a user QP, qp->sq.queue is a r...
|
7.1 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92522
In the Linux kernel, the following vulnerability has been resolved:
ACPI: processor: validate MADT IOAPIC entry bounds
The IOAPIC hotplug lookup parses both MADT and _M...
|
7.3 High | — | 0,14% | 17 Sep 2026 |
|
CVE-2026-92518
In the Linux kernel, the following vulnerability has been resolved:
riscv, bpf: Fix kernel stack corruption in tailcall with CFI
When CONFIG_CFI_CLANG is enabled, prog-...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-92511
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_destroy_cq_user()
When accessing a CQ via the netlink...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-92510
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_destroy_srq_user()
When accessing a SRQ via the netlin...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-92508
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_free_cq()
When accessing a CQ via the netlink path the...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92507
In the Linux kernel, the following vulnerability has been resolved:
RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
When accessing a PD via the netlink...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92504
In the Linux kernel, the following vulnerability has been resolved:
thermal: intel: int3400: clean up ODVP on probe failures
evaluate_odvp() creates per-ODVP sysfs file...
|
7.0 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-92489
In the Linux kernel, the following vulnerability has been resolved:
xfrm: Fix skb double-free in xfrm_dev_direct_output()
A return value other than 1 from local_out() m...
|
9.8 Critical | — | 0,46% | 17 Sep 2026 |
|
CVE-2026-92488
In the Linux kernel, the following vulnerability has been resolved:
RDMA/erdma: complete object teardown when the destroy command fails
erdma_destroy_qp(), erdma_destro...
|
7.0 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-92485
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix WARNING in bpf_tracing_link_release
The trampoline could be corrupted by the blindly
'tr->f...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90435
In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5: Fix integer overflow of user QP buffer size
set_user_buf_size() computes the QP buffer si...
|
7.8 High | — | 0,13% | 17 Sep 2026 |
|
CVE-2026-90429
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
A user VINTF is torn down by...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90427
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
__tegra241_cmdqv_probe()...
|
7.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90425
In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
tegra241_vintf_init_vsid() maps a gue...
|
8.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90423
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix UAF in ODP init error-handling path
rxe_odp_mr_init_user() stores &umem_odp->umem in m...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90419
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: prevent out-of-bounds read in super root block parsing
super-root inode metadata size is tru...
|
7.1 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90414
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: reject PDUs declaring more data than was received
isert_recv_done() hands each received PD...
|
9.1 Critical | — | 0,51% | 17 Sep 2026 |
|
CVE-2026-90413
In the Linux kernel, the following vulnerability has been resolved:
IB/isert: reject login PDUs declaring more data than was received
isert_login_recv_done() records ho...
|
9.1 Critical | — | 0,82% | 17 Sep 2026 |
|
CVE-2026-90408
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
There is no policy entry...
|
7.7 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90407
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
There is no policy entry...
|
7.7 High | — | 0,18% | 17 Sep 2026 |
|
CVE-2026-90403
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
In the last error path in rtl_pci_probe(), the...
|
7.0 High | — | 0,15% | 17 Sep 2026 |
|
CVE-2026-90402
In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Fix controller cleanup on EDL sysfs failure
mhi_register_controller() adds the contr...
|
7.0 High | — | 0,12% | 17 Sep 2026 |
|
CVE-2026-90401
In the Linux kernel, the following vulnerability has been resolved:
md: remove REQ_NOWAIT support from raid1/10/456
REQ_NOWAIT support in md personalities that can bloc...
|
7.1 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90399
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
Currently, in ath12k_wmi_mac_phy_caps_pars...
|
8.4 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90398
In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
Currently, in ath11k_wmi_tlv_mac_phy_caps_...
|
8.4 High | — | 0,14% | 17 Sep 2026 |
|
CVE-2026-90392
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix potential UAF when reading bpf link info
In bpf_link_show_fdinfo and bpf_link_get_info_by_f...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90388
In the Linux kernel, the following vulnerability has been resolved:
iommu/dma: Check atomic pool allocation result directly
The non-blocking, non-coherent allocation pa...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90387
In the Linux kernel, the following vulnerability has been resolved:
swiotlb: Preserve allocation virtual address for dynamic pools
swiotlb_alloc_tlb() can allocate from...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90383
In the Linux kernel, the following vulnerability has been resolved:
misc: sgi-gru: remove interrupt-context page-table walks
The GRU TLB miss handler walks a process's...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90381
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
When perf...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90380
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
A use-after-free issue occurs in mt7...
|
8.8 High | — | 0,31% | 17 Sep 2026 |
|
CVE-2026-90379
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
When an AER error occurs an...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90372
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
If a peer's VHT/HE MCS map has no...
|
7.1 High | — | 0,36% | 17 Sep 2026 |
|
CVE-2026-90371
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: fix RXDMAD_C buffer recycling race
The RXDMAD_C buffers come from the RRO data queues' p...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90367
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
mt7996_mac_reset_work() pa...
|
8.8 High | — | 0,38% | 17 Sep 2026 |
|
CVE-2026-90358
In the Linux kernel, the following vulnerability has been resolved:
bpf, x86: Fix trampoline stack size for 128-bit arguments
btf_distill_func_proto() accepts a functio...
|
7.8 High | — | 0,16% | 17 Sep 2026 |
|
CVE-2026-90357
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
The flow is added to dev->twt_l...
|
8.8 High | — | 0,34% | 17 Sep 2026 |
|
CVE-2026-90353
In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
After mt7915_register_ext_phy(...
|
7.0 High | — | 0,14% | 17 Sep 2026 |
|
CVE-2026-90347
In the Linux kernel, the following vulnerability has been resolved:
arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
Commit e057b9477232 ("arm64: syscall:...
|
8.4 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90343
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: stop PMSR before P2P and NAN teardown
PMSR request teardown must abort active measur...
|
7.8 High | — | 0,17% | 17 Sep 2026 |
|
CVE-2026-90341
In the Linux kernel, the following vulnerability has been resolved:
firmware: coreboot: Validate table bounds
The existing coreboot_table_populate() bounds checks limit...
|
7.7 High | — | 0,19% | 17 Sep 2026 |
|
CVE-2026-90332
In the Linux kernel, the following vulnerability has been resolved:
PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
The MSI-X path already flushes any po...
|
8.2 High | — | 0,27% | 17 Sep 2026 |
|
CVE-2026-90329
In the Linux kernel, the following vulnerability has been resolved:
HID: synchronize input before cleaning up a failed probe
hid_device_io_start() allows reports to run...
|
8.8 High | — | 0,34% | 17 Sep 2026 |